company

KnowBe4

KnowBe4 is a cybersecurity company providing security awareness training and simulated phishing programs to help organizations reduce social-engineering risk.

Known aliases

KnowBe4 Threat Lab

Relationships

No evidence-backed relationships are recorded.

Current stories

security3 publishersConfirmed

Spring Ring impersonated the help desk over external Teams accounts to relay NTLM at domain controllers

Unit 42 says the crew reached more than 150 employees at ten or more companies without a single software exploit, which puts Teams federation policy and NTLM relay hardening in scope and leaves the endpoint downstream.

Publishers:helpnetsecurity.comscworld.comunit42.paloaltonetworks.com

Perspective Coverage

3 publishers

Builder: Builder 28%
Operator: Operator 65%
Investor: Investor 7%

Reality

Evidence55
Adoption: Insufficient
Hype gap+20
Incentives70
Confidence60

security6 publishersConfirmed

ShinyHunters claims the private keys to Clop's onion address after defacing the leak site

BleepingComputer confirmed the defacement and the file ShinyHunters uploaded to Clop's Tor site. The stolen logs and the onion keys are so far only the attacker's account, and Clop has 72 hours to make contact.

Publishers:bleepingcomputer.comcyberdaily.auinfosecurity-magazine.commalwarebytes.comscworld.comtherecord.media

Perspective Coverage

6 publishers

Builder: Builder 18%
Operator: Operator 63%
Investor: Investor 19%

Reality

Evidence60
Adoption55
Hype gap+35
Incentives78
Confidence62

leadership1 publisherOne report

Revoking the stolen tokens left GhostCode's Intune device inside the tenant

eSentire says a phishing kit called GhostCode used Microsoft's device-code flow to register three devices within 77 seconds of a victim completing MFA, and one of them stayed enrolled in Intune until it was explicitly removed.

Publishers:csoonline.com

Reality

Evidence58
Adoption30
Hype gap+12
Incentives60
Confidence55

security1 publisherOne report

Direct Send carried 29,785 spoofed internal emails past the mail gateway in two months

KnowBe4's Threat Lab logged the messages across July and August 2026. None of them needed a stolen password to look like mail from HR or accounting, and a single send addressed 900 recipients. The report landed September 10.

Publishers:infosecurity-magazine.com

Reality

Evidence57
Adoption54
Hype gap+14
Incentives68
Confidence56

security2 publishersConfirmed

Agent Tesla v4 hides in emoji and never hits disk: an email-rule problem, not a new-malware one

KnowBe4 says a new build of the commodity infostealer uses Unicode emoji to break string signatures and keeps its final payload off disk. The lure is a spoofed bank thread aimed at finance teams.

Publishers:infosecurity-magazine.comscworld.com

Reality

Evidence45
Adoption20
Hype gap+30
Incentives70
Confidence52

product1 publisherOne report

After Arup, a face on a video call is not a credential

Fifteen transfers worth about $25m went out because the people on the call looked and sounded right. Detection accuracy is near chance, so the surviving control is procedural.

Publishers:zdnet.com

Reality

Evidence48
Adoption32
Hype gap+22
Incentives66
Confidence46